Behavioral task
behavioral1
Sample
d787f287fc31f7f9a41a672983f944605e86d123f5520831a1bc6027952619ce.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d787f287fc31f7f9a41a672983f944605e86d123f5520831a1bc6027952619ce.doc
Resource
win10v2004-20240226-en
General
-
Target
d787f287fc31f7f9a41a672983f944605e86d123f5520831a1bc6027952619ce
-
Size
269KB
-
MD5
93b7265a540be20724b66115deafb17a
-
SHA1
b9ac8dca34da78529f3a2d2e8a032de4874dc69f
-
SHA256
d787f287fc31f7f9a41a672983f944605e86d123f5520831a1bc6027952619ce
-
SHA512
da2c9df92cca8a106d1773eb5880d3b2c581c19e3f4ed2dacd0d843c817c84849b623688641049dce27706ae1b782f3cca1979fc1e5858978fb40f8c4f3a8d55
-
SSDEEP
6144:ApaFUzYwyGpKfaGvGdGLGQs+P8qpOsafh:Apaa1ymVCW85s+kiaJ
Malware Config
Signatures
-
Office macro that triggers on suspicious action 1 IoCs
Office document macro which triggers in special circumstances - often malicious.
resource yara_rule sample office_macro_on_action -
resource sample
Files
-
d787f287fc31f7f9a41a672983f944605e86d123f5520831a1bc6027952619ce.doc windows office2003
Sheet20
ThisWorkbook
Sheet17
AboutGWSDAT
GWSDATAdmin
LicenseForm
DisclaimerAcceptForm
DatatoCSV
DisclaimerForm1
ConfigParams
GWSDAT
GWSDATOptions
Sheet1
Sheet19
RLibsAdmin